The short answer is yes: a properly drafted non-disclosure agreement is an enforceable contract in the UK. But "properly drafted" is doing a lot of work in that sentence. Enforceability depends on the NDA meeting the requirements of a contract and staying within the limits the courts impose. This guide explains what holds up, what does not, and what you can actually do if confidence is breached.
NDASafe is a document preparation service, not a law firm. Our templates are legally reviewed against applicable UK law at the point of release, but every situation is different. Where significant value, unusual risk or a cross-border element is involved, take independent legal advice before you sign.
The conditions an NDA has to meet
- The basics of a contract. Offer and acceptance, an intention to create legal relations, and consideration (something of value passing each way). In a commercial deal the mutual exchange of information usually supplies the consideration; for an existing employee, fresh consideration may be needed.
- Certainty. The confidential information has to be defined clearly enough that a court can tell what is covered. A definition so vague it could mean anything is hard to enforce.
- Reasonableness. The scope and duration must be no wider than needed to protect a legitimate interest. A tightly drawn, time-limited NDA is far more robust than an indefinite, catch-all one.
- A legitimate interest to protect. Trade secrets, confidential business information, customer data — yes. Stopping ordinary competition or hushing up something embarrassing — no.
What makes an NDA unenforceable
Courts will decline to enforce — in whole or in part — an NDA that oversteps. The main failure modes:
- Restraint of trade. An NDA so broad that it effectively stops the recipient working or competing can be struck down as an unreasonable restraint of trade.
- Gagging wrongdoing. A clause that tries to stop someone reporting a crime or making a protected disclosure is void on public-policy grounds. The Solicitors Regulation Authority has issued warning notices about exactly this kind of "gagging clause".
- No real consideration. Asking an existing employee to sign without anything new in return can leave the agreement vulnerable.
- Uncertainty. If nobody can tell what the confidential information actually is, there is nothing definite to enforce.
- Penalty clauses. A fixed "you will pay £X if you breach" sum that is not a genuine pre-estimate of loss may be unenforceable as a penalty.
No NDA can override an individual's statutory right to make a protected disclosure under the Employment Rights Act 1996 (as amended by the Public Interest Disclosure Act 1998). A compliant employee NDA states this expressly. See our whistleblowing guide.
Remedies if an NDA is breached
If someone breaks an NDA, the injured party can go to court. The two principal remedies are an injunction — a court order to stop further disclosure or use, which can be sought urgently as an interim measure before any leak spreads — and damages, compensating for the loss the breach caused.
In practice the threat of an injunction is often the most valuable thing an NDA gives you: it lets you move fast to contain a disclosure rather than only suing for money after the damage is done.
How to make yours as enforceable as possible
- Define the confidential information precisely — name specific items where you can.
- Keep the scope and term reasonable and tied to a legitimate interest.
- Include the standard exclusions (public domain, independently developed, required by law).
- Keep the lawful carve-outs — whistleblowing, reporting crime, regulatory co-operation.
- Make sure both parties sign, and that there is genuine consideration.
NDASafe templates are built around these principles and legally reviewed against applicable UK law at release. Browse the eight templates or read the complete NDA guide.